Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Scenario: ASA 5520 with 8.2 firmware, AnyConnect SSL VPN Client 2.5.3046 on Windows platforms, and Windows 2008 R2 NPS server RADIUS. I've read a lot of blog posts regarding various aspects of this scenario, but none fully describe how to setup the ...
ISP assigned us the following:xxx.yyy.zzz.32/30 as the outside interface network.This means .33 is the next hop, gateway, or default route.This means .34 is the outside interface on the ASA.xxx.yyy.zzz.64/26 as the ip address pool.This means xxx.yyy....
In DAP, what is configured is the following:Action: ContinueNetwork ACL Filters: ACL to allow authentication access [permit all] Web-Type ACL Filters: ACL to allow authentication access [permit all]Functions: enable on allPort Forwarding Lists: no...
Yes, on the ASA i see:AAA transaction status ACCEPT: use=[username]then multiple DAP messages ending with the last message:DAP: User [username], addr 4.12.12.134: Connection AnyConnect: THe following DAP records were selected for this connection: Dfl...
Part of the issue was that the website was in the DMZ and I had nothing setup to route to that locationI added a static route as suggested and it resolved the issue.Thanks for the assistance!Regards,Don
Remember, all these /30 and /26 addresses are on the outside interface, with the /30 assigned to the interface and the /26 assigned via static NAT - not sure if that has any impact.For NAT and ACLs, what I have is this:access-list Outside_access_in e...
